GCVE-110-CLOUD-2025-0190

Advisory Published

Vulnetix · Advisory published September 17, 2025

A critical vulnerability discovered in Microsoft's Entra ID (formerly Azure AD) allowed for cross-tenant access and potential global admin privilege escalation. The flaw was found in the legacy Azure AD Graph API, which improperly validated the originating tenant for undocumented "Actor tokens." An attacker could use a token from their own tenant to authenticate as any user, including Global Admins, in any other tenant. This vulnerability bypassed security policies like Conditional Access. The issue was reported to Microsoft, who deployed a global fix within days.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Azure	Entra	—	—

References

Entra ID actor token validation bug allowing cross-tenant global admin

advisory

Browse GCVE Records

67,407 records in the GCVE database · Updated August 11, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON